Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.mft
File:                     443BA13DE0ABBA767490BA2BABF46C62BC39424A.mft (raw, json)
Hash identifier:          J3MU1tyDsEpkjT3tKHwqMw6Qw+Hiey5gXonlB2WUsYo=
Subject key identifier:   B3:CF:16:01:B9:E1:B6:7E:C4:9A:66:61:FA:CD:C7:A6:9E:72:01:78
Authority key identifier: 44:3B:A1:3D:E0:AB:BA:76:74:90:BA:2B:AB:F4:6C:62:BC:39:42:4A
Certificate issuer:       /CN=443BA13DE0ABBA767490BA2BABF46C62BC39424A
Certificate serial:       416557F62E624BBAC1E9B0866DCE094B51813F7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443BA13DE0ABBA767490BA2BABF46C62BC39424A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.mft
Manifest number:          06
Signing time:             Wed 25 Jun 2025 00:36:24 +0000
Manifest this update:     Wed 25 Jun 2025 00:31:24 +0000
Manifest next update:     Thu 26 Jun 2025 03:40:24 +0000
Files and hashes:         1: 443BA13DE0ABBA767490BA2BABF46C62BC39424A.crl (hash: QzZ0jdaRWrAaqih/W+nw0C4El3Z/pjK/wV86uA2BJ3w=)
                          2: 323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (hash: UePXoQUId1fCKMXOQtXLYp/YCvJpcpbkwWbtILw3IvQ=)
                          3: 3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (hash: s+Cgtcs1u9AuUQZgMsSHyNX1PbEjI3vJ7TRf4O9D8XI=)
                          4: 3134332e302e3133382e302f32332d3233203d3e20323634303131.roa (hash: atn37UIjhEoFG3jijk7vR33FJwr0G2x2C7kqov02GSQ=)
                          5: 3134332e302e3133362e302f32322d3232203d3e20323634303131.roa (hash: +P2QZO0Wb8NsjyeDXMlGqXcelYO0EBe/w+d+dtWlSzQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:65:57:f6:2e:62:4b:ba:c1:e9:b0:86:6d:ce:09:4b:51:81:3f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443BA13DE0ABBA767490BA2BABF46C62BC39424A
        Validity
            Not Before: Jun 25 00:31:24 2025 GMT
            Not After : Jun 26 03:40:24 2025 GMT
        Subject: CN=B3CF1601B9E1B67EC49A6661FACDC7A69E720178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:90:a1:e6:76:c9:59:fb:c2:aa:8a:87:fd:
                    69:3e:e8:4d:1f:c0:4a:58:2c:2e:e4:4b:98:44:48:
                    92:b8:e2:5e:ed:59:52:b1:96:f1:fb:d6:a4:fb:a7:
                    e5:19:00:ac:3f:58:aa:8d:56:84:95:da:b0:94:c0:
                    f4:49:41:26:4c:7e:0e:6c:6a:9f:16:45:15:80:57:
                    87:34:20:9d:3d:b8:67:de:51:db:5c:6c:74:a4:f7:
                    37:d9:ea:32:37:63:4c:cb:b7:eb:85:3f:3d:53:11:
                    b6:35:fb:70:9a:c2:52:e1:c4:4a:0b:3c:b3:93:8b:
                    70:cf:31:29:70:23:17:93:1e:84:b3:06:de:c0:5b:
                    59:0a:9a:27:b7:ab:ce:81:1b:72:1c:e5:58:c4:53:
                    92:2e:69:de:03:e7:3c:2c:1d:44:d7:1c:57:d2:53:
                    c9:50:5b:e1:cc:97:f0:b4:6d:35:d5:13:ca:1b:53:
                    3e:31:c8:7e:a7:6e:ca:10:9a:c0:28:4d:1e:f4:ff:
                    07:2f:d3:8d:9d:13:27:40:eb:7a:86:f5:f2:9f:99:
                    cd:96:e6:eb:20:34:98:77:86:3b:56:75:be:0a:56:
                    45:c9:16:b7:a4:6f:78:23:3d:7d:32:dc:8c:74:6b:
                    9d:9c:66:d2:72:2a:71:02:85:70:90:05:eb:16:a1:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CF:16:01:B9:E1:B6:7E:C4:9A:66:61:FA:CD:C7:A6:9E:72:01:78
            X509v3 Authority Key Identifier:
                keyid:44:3B:A1:3D:E0:AB:BA:76:74:90:BA:2B:AB:F4:6C:62:BC:39:42:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443BA13DE0ABBA767490BA2BABF46C62BC39424A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9d:27:e8:62:16:dc:ff:b0:f6:ce:2b:dd:92:4e:a2:4d:05:
         a6:7c:4e:68:dc:ee:b1:45:9f:80:cf:bd:a8:2e:b8:72:3d:ec:
         4b:2e:22:f5:9e:33:5a:0d:ed:36:27:51:7d:78:67:21:22:a3:
         85:5b:1f:bb:e0:76:f1:a7:b3:80:5a:32:c8:a7:5e:fe:b2:dd:
         85:71:e8:40:48:e3:bd:df:26:05:13:11:38:fa:5e:0e:74:da:
         84:3b:4e:b0:0e:a7:5e:2c:5b:46:c6:0b:5f:25:b2:25:8f:0f:
         27:50:c4:17:51:be:65:82:a5:82:5f:f2:3d:39:84:b9:a3:16:
         05:41:50:ab:fa:0a:47:93:65:46:6d:62:6c:74:b3:bd:f6:e5:
         b0:93:46:7c:64:d6:18:a0:7d:67:cd:d7:4b:88:df:7a:07:75:
         5b:78:e3:f2:48:13:1a:bf:0a:7e:47:30:24:20:9d:d0:a4:3b:
         8d:ca:96:e4:f6:bf:08:4a:0e:72:b9:a5:33:52:4b:aa:23:77:
         30:3b:81:43:14:5d:de:b5:cc:5c:74:2e:b1:ed:d5:2c:0c:63:
         20:85:c1:ec:19:86:a5:0b:67:c3:21:45:53:3e:14:a3:ab:b6:
         20:9e:1a:c8:b8:f1:00:1a:c3:0b:df:74:71:fa:ff:7b:fd:91:
         8f:92:fd:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQWVX9i5iS7rB6bCGbc4JS1GBP30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzQkExM0RFMEFCQkE3Njc0OTBCQTJCQUJGNDZDNjJC
QzM5NDI0QTAeFw0yNTA2MjUwMDMxMjRaFw0yNTA2MjYwMzQwMjRaMDMxMTAvBgNV
BAMTKEIzQ0YxNjAxQjlFMUI2N0VDNDlBNjY2MUZBQ0RDN0E2OUU3MjAxNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+JCh5nbJWfvCqoqH/Wk+6E0f
wEpYLC7kS5hESJK44l7tWVKxlvH71qT7p+UZAKw/WKqNVoSV2rCUwPRJQSZMfg5s
ap8WRRWAV4c0IJ09uGfeUdtcbHSk9zfZ6jI3Y0zLt+uFPz1TEbY1+3CawlLhxEoL
PLOTi3DPMSlwIxeTHoSzBt7AW1kKmie3q86BG3Ic5VjEU5Iuad4D5zwsHUTXHFfS
U8lQW+HMl/C0bTXVE8obUz4xyH6nbsoQmsAoTR70/wcv042dEydA63qG9fKfmc2W
5usgNJh3hjtWdb4KVkXJFrekb3gjPX0y3Ix0a52cZtJyKnEChXCQBesWoYJJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUs88WAbnhtn7EmmZh+s3Hpp5yAXgwHwYDVR0j
BBgwFoAURDuhPeCrunZ0kLorq/RsYrw5QkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0
UlYvMC80NDNCQTEzREUwQUJCQTc2NzQ5MEJBMkJBQkY0NkM2MkJDMzk0MjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0M0JBMTNERTBBQkJBNzY3
NDkwQkEyQkFCRjQ2QzYyQkMzOTQyNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0UlYvMC80
NDNCQTEzREUwQUJCQTc2NzQ5MEJBMkJBQkY0NkM2MkJDMzk0MjRBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUZ0n6GIW3P+w9s4r3ZJOok0FpnxOaNzusUWfgM+9qC64cj3sSy4i9Z4zWg3t
NidRfXhnISKjhVsfu+B28aezgFoyyKde/rLdhXHoQEjjvd8mBRMROPpeDnTahDtO
sA6nXixbRsYLXyWyJY8PJ1DEF1G+ZYKlgl/yPTmEuaMWBUFQq/oKR5NlRm1ibHSz
vfblsJNGfGTWGKB9Z83XS4jfegd1W3jj8kgTGr8KfkcwJCCd0KQ7jcqW5Pa/CEoO
crmlM1JLqiN3MDuBQxRd3rXMXHQuse3VLAxjIIXB7BmGpQtnwyFFUz4Uo6u2IJ4a
yLjxABrDC990cfr/e/2Rj5L9mQ==
-----END CERTIFICATE-----